Configuring PSC Appliance for High Availability in vSphere 6.5/6.7

Products

• VMware vCenter Server

Issue/Introduction

This article provides steps to configure Platform Services Controller (PSC) Appliance 6.5/6.7 High Availability.

Environment

VMware vCenter Server Appliance 6.5.x
VMware vCenter Server Appliance 6.7.x

Resolution

This article is part of a series for configuring PSC HA, for the main article, see:

• vSphere 6.5: Configuring Platform Service Controller HA in vSphere 6.5 (2147018)
• vSphere 6.7: Configuring Platform Service Controller HA in vSphere 6.7

Configuring PSC HA 6.5 for SSL passthrough

To configure the PSCs for load balancing, run updateSSOConfig.py and UpdateLsEndpoint.py scripts:

 

Notes:

• The updateSSOConfig.py script updates information local to each PSC and must be ran on all PSCs in the HA instance.
• The UpdateLsEndpoint.py script updates the ServiceRegistration Endpoints in VMDir and only needs to be ran on one of the PSCs in the HA instance.

Running the updateSSOConfig.py script

1. Connect to the PSC appliance and log in with root credentials.
2. Type shell to access the Bash shell.
3. Navigate to /usr/lib/vmware-sso/bin with this command:
   
   cd /usr/lib/vmware-sso/bin
    
4. Run this command:
   
   python updateSSOConfig.py --lb-fqdn=PSC_HA_VIP_FQDN
   
   For example:
   
   python updateSSOConfig.py --lb-fqdn=psc-ha-vip.domain.com
5. Repeat these steps on remaining PSCs.

Running the UpdateLsEndpoint.py script

1. Connect to the PSC appliance and log in with root credentials.
2. Type shell to access the Bash shell.
3. Navigate to /usr/lib/vmware-sso/bin with this command:
   
   cd /usr/lib/vmware-sso/bin
    
4. Run this command:
   
   python UpdateLsEndpoint.py --lb-fqdn=PSC_HA_VIP_FQDN --user=administrative_user --password=password
   
   For example:
   
   python UpdateLsEndpoint.py --lb-fqdn=psc-ha-vip.domain.com [email protected] --password=VMware123$
   
   Note: Perform these step on a single PSC node only.

Configuring PSC HA 6.5 Update 1 for SSL termination

To configure the PSCs for load balancing, run updateSSOConfig.py and UpdateLsEndpoint.py scripts:

 

Notes:

• The updateSSOConfig.py script updates information local to each PSC and must be ran on all PSCs in the HA instance.
• The UpdateLsEndpoint.py script updates the ServiceRegistration Endpoints in VMDir and only needs to be ran on one of the PSCs in the HA instance.

Running the updateSSOConfig.py script

1. Connect to the PSC appliance and log in with root credentials.
2. Type shell to access the Bash shell.
3. Navigate to /usr/lib/vmware-sso/bin with this command:
   
   cd /usr/lib/vmware-sso/bin
    
4. Run this command:
   
   python updateSSOConfig.py --lb-fqdn=PSC_HA_VIP_FQDN
   
   For example:
   
   python updateSSOConfig.py --lb-fqdn=psc-ha-vip.domain.com
5. Repeat these steps on remaining PSCs.

Running the UpdateLsEndpoint.py script

1. Connect to the PSC appliance and log in with root credentials.
2. Type shell to access the Bash shell.
3. Navigate to /usr/lib/vmware-sso/bin with this command:
   
   cd /usr/lib/vmware-sso/bin
    
4. Run this command:
   
   python UpdateLsEndpoint.py --upgrade --lb-fqdn=PSC_HA_VIP_FQDN --user=administrative_user --password=password
   
   For example:
   
   python UpdateLsEndpoint.py --upgrade --lb-fqdn=psc-ha-vip.domain.com [email protected] --password=VMware123$
   
   Note: Perform these step on a single PSC node only.

Additional Information

Obtaining vSphere certificates from a Microsoft Certificate Authority
Configuring Platform Service Controller HA in vSphere 6.5
Configuring certificates for PSC for High Availability in vSphere 6.5
PSC Appliance を vSphere 6.5 の高可用性向けに構成する
在 vSphere 6.5 中配置 PSC 设备高可用性
Konfigurieren der PSC-Appliance für High Availability in vSphere 6.5